$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: Yw2eMb/Wq0BRKVF/Sv1E43U2VRpPl5YxDryySU4o3zg= Subject key identifier: FD:08:B6:13:F5:F0:CB:C7:B3:E3:D5:E4:0B:19:39:73:E6:2C:79:0D Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 61C0B4E58050EAEAE5DCF712386754207F372419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 022B Signing time: Sun 02 Nov 2025 09:50:48 +0000 Manifest this update: Sun 02 Nov 2025 09:45:48 +0000 Manifest next update: Wed 05 Nov 2025 20:20:48 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 3: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 4: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: bBapLCG3EiVLYKTY8HvLHg7EeuYt3WlKv1IWPC8d2qM=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c0:b4:e5:80:50:ea:ea:e5:dc:f7:12:38:67:54:20:7f:37:24:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Nov 2 09:45:48 2025 GMT Not After : Nov 5 20:20:48 2025 GMT Subject: CN=FD08B613F5F0CBC7B3E3D5E40B193973E62C790D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:dd:f0:ba:55:ab:7e:0b:53:08:b0:de:d4: 8f:e4:52:f3:5d:c9:02:15:70:e8:f3:eb:1d:3a:87: aa:e2:d0:d5:80:b7:5f:eb:27:d9:20:04:64:2f:c7: 3e:46:74:3a:b1:61:11:83:14:22:c8:0a:4e:42:37: 09:79:1e:d1:24:43:00:c3:2d:25:e0:bf:3d:a2:2b: 0f:3d:dc:f5:c1:3a:53:c3:2c:fc:e8:1c:e4:53:2f: c3:d8:c9:b4:63:c1:59:cb:2c:91:5e:bb:65:3f:e3: 54:06:bf:26:50:f1:ae:49:15:57:dc:11:5f:e5:3e: ca:8f:fc:40:4c:6e:19:43:7d:85:20:fc:5b:03:04: 9a:82:15:cf:6c:37:1b:4e:83:b3:e8:e0:56:be:2f: 5c:87:18:95:93:b6:11:01:9f:c2:00:c0:84:67:57: d0:a8:41:3f:8b:af:f8:4e:b2:e2:20:d3:a9:c0:1a: c5:0b:0c:8a:e9:a2:58:da:5e:72:fb:1c:32:64:bf: c8:0d:6a:8f:1d:88:13:0c:3a:ba:6a:89:63:af:fd: 69:e9:b0:f4:39:09:57:35:42:d6:cf:7b:a6:a7:af: d1:83:cd:15:ad:3e:e6:9a:af:2f:52:49:ef:09:69: 87:8b:96:c3:73:40:0e:09:af:46:ca:88:52:1d:2f: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:B6:13:F5:F0:CB:C7:B3:E3:D5:E4:0B:19:39:73:E6:2C:79:0D X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:1d:b6:b8:a1:8f:51:02:fe:64:a5:42:2c:d6:05:4b:4f:8d: 3e:53:23:f8:95:41:1c:92:a8:75:21:68:3d:7a:fb:4b:51:a4: 24:6c:af:29:08:2e:b6:d8:1e:e1:bd:89:13:33:28:b6:92:8d: fb:b5:81:b1:84:e8:a0:ef:15:46:82:8b:51:6d:39:33:4a:76: ca:04:28:f0:81:48:77:84:cf:6b:00:c4:f8:f7:3d:13:20:61: 05:cc:e2:28:4f:1e:41:c2:18:95:20:c5:e7:af:34:99:e6:f3: 04:6a:d3:06:71:85:65:72:0c:ab:8f:22:08:a2:27:93:b2:31: 8b:8c:71:df:7f:60:40:64:a8:6b:a4:a3:1d:6c:75:06:72:45: 21:eb:c5:6b:8b:5a:d4:f1:41:eb:93:2b:d2:ce:6e:f0:c7:1a: c1:3d:3f:8f:4e:cb:97:88:8a:87:92:27:75:8c:b6:a0:dc:6b: 4e:97:1d:f2:6c:17:51:2f:ea:18:3b:48:10:10:31:f5:33:4a: 33:a0:95:d0:49:d2:40:ac:b8:a1:1e:b2:3f:6c:5e:1e:7e:ed: cb:63:75:78:a5:f9:eb:64:45:56:55:41:a7:61:cf:9d:3b:13: 70:da:bf:5b:75:0b:42:57:04:7d:11:1d:34:8c:c9:c5:53:31: 7b:34:16:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcC05YBQ6url3PcSOGdUIH83JBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTExMDIwOTQ1NDhaFw0yNTExMDUyMDIwNDhaMDMxMTAvBgNV BAMTKEZEMDhCNjEzRjVGMENCQzdCM0UzRDVFNDBCMTkzOTczRTYyQzc5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln93wulWrfgtTCLDe1I/kUvNd yQIVcOjz6x06h6ri0NWAt1/rJ9kgBGQvxz5GdDqxYRGDFCLICk5CNwl5HtEkQwDD LSXgvz2iKw893PXBOlPDLPzoHORTL8PYybRjwVnLLJFeu2U/41QGvyZQ8a5JFVfc EV/lPsqP/EBMbhlDfYUg/FsDBJqCFc9sNxtOg7Po4Fa+L1yHGJWTthEBn8IAwIRn V9CoQT+Lr/hOsuIg06nAGsULDIrpoljaXnL7HDJkv8gNao8diBMMOrpqiWOv/Wnp sPQ5CVc1QtbPe6anr9GDzRWtPuaary9SSe8JaYeLlsNzQA4Jr0bKiFIdLzLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Qi2E/Xwy8ez49XkCxk5c+YseQ0wHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0dtrihj1EC/mSlQizWBUtPjT5TI/iVQRyS qHUhaD16+0tRpCRsrykILrbYHuG9iRMzKLaSjfu1gbGE6KDvFUaCi1FtOTNKdsoE KPCBSHeEz2sAxPj3PRMgYQXM4ihPHkHCGJUgxeevNJnm8wRq0wZxhWVyDKuPIgii J5OyMYuMcd9/YEBkqGukox1sdQZyRSHrxWuLWtTxQeuTK9LObvDHGsE9P49Oy5eI ioeSJ3WMtqDca06XHfJsF1Ev6hg7SBAQMfUzSjOgldBJ0kCsuKEesj9sXh5+7ctj dXil+etkRVZVQadhz507E3Dav1t1C0JXBH0RHTSMycVTMXs0FjM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:27 2025 by rpki-client